Growth signalNo paid features detectedMedium-risk permissions

Lyra

Lyra is a XSS automater and broken link checker.

Users756Current public install base

Rating5.0Store average score

Reviews1Public review volume

Manifest versionV3Extension platform version

7-day growth+22Net users gained this week

7-day growth rate+3%Relative weekly velocity

Preview

Lyra Media preview

2 assets

Trend

User growth trend

Review user movement across collected snapshots.

User Growth Over Time

Rating trend

7-day rating trend

View collected rating snapshots from the latest 7-day window to assess rating stability.

7-day rating change

Start

5.00

Latest

5.00

7-day rating change

0.00

2026年7月15日2026年7月21日

Growth overview

Daily, weekly, and monthly growth

Compare 1-day, 7-day, and 30-day net growth and growth rate.

1-day growthGrowing

+13+1.75%

7-day growthGrowing

+22+3%

30-day growthGrowing

+36+5%

Technical snapshot

Version, languages, and crawl freshness

Review publication date, version, supported languages, and crawl timestamps.

Version2.0

ManifestV3

Size1.16MiB

Languages1English (United Kingdom)

Published--

Store updated--

Last crawled--

Overview

Product summary

Review the store description, core capabilities, and common use cases.

Lyra is a automated website XSS vulnerability checker.

It can be used in 2 ways,

1. Default payload list

2. Custom payload list

- Automates XSS vulnerability checks in the Chrome browser.

- Scans the current website for all available links.

Reviews

Recent review snapshot

Inspect the latest comments and rating distribution.

Store average score5.0Chrome Web Store aggregate rating, including ratings without synced review text

Synced text average5.0Average computed only from synced review bodies below

Reviews with text1Synced review bodies

Total ratings / reviews1Chrome Web Store public rating/review count

Store average score: 5.0. The bars below are calculated from synced review text only, so they may be empty for extensions that have public ratings but no synced comments yet.

5★

4★

3★

2★

1★

Rakesh Choudhary2026年5月15日

great extension to automate xss attack.

Similar and related extensions

Review related products from the Chrome Web Store detail page.

Pentesting Toolkit

Tools

A pentester's all-in-one toolkit. Find the best tools and content for the job at the click of a button. Powered by PentestList.com

NavSec Vulnerability Scanner

Privacy & Security

Comprehensive security scanner with advanced XSS detection, API security analysis, and authentication testing

JS Recon Buddy

Privacy & Security

Analyze page scripts for bug bounty reconnaissance.

DIRFOX - Endpoint Fuzzer for Pentesters

Tools

Fuzz endpoints using custom or GitHub-hosted wordlists. Built for security researchers and pentesters.

Bolt

Developer Tools

Likely PaidConfidence 92Platform Stripe

The purpose of this Google Chrome extension is to provide support to pentesters and developers in testing web applications

Recon Buddy

Developer Tools

Extract recon data like JWTs, API keys, parameters, and endpoints from visited pages.

AI product read

Automated XSS Vulnerability Checker and Broken Link Verifier

Reduces the manual effort and time required for security researchers and developers to identify Cross-Site Scripting (XSS) vulnerabilities and broken hyperlinks on websites.

The user installs the extension and opens the popup while on a target website. The extension scans the DOM for links and tests them for broken status. Simultaneously, it runs XSS payloads against input fields or URL parameters to check for vulnerabilities, displaying the results in the popup.

Target users: Bug bounty hunters / Web developers / Security researchers

The main JavaScript bundle is minified, making it difficult to trace the exact UI flow or specific XSS payload injection points without de-obfuscation.

Monetization

No paid features detected

The extension description and code indicate a free tool. The keyword 'pro' found in the static analysis was matched against 'production.min.js' (React library filename) and 'verified_contents.json' (Chrome Web Store verification metadata), neither of which implies a paid feature. No payment gateways, subscription management, or upgrade prompts were found.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension is a standalone client-side tool using 'activeTab' and 'scripting' permissions. It injects scripts into the current page to scan for XSS and broken links. There is no code for authentication, login forms, or API calls to an external service requiring credentials. The user can immediately use the extension on any tab without logging in.

Permission risk

Medium-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：activeTab、scripting

Publisher

Aswin Venkat

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access